CVE-2001-1105: RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempt...

Security readout for executives and security teams

This is an old authentication-bypass issue in RSA BSAFE SSL-J 3.0, 3.0.1, and 3.1, reported in connection with Cisco iCND/iCDN 2.0. A failed login could leave a cached SSL session ID that later allowed access without proper client authentication. Likely limited to legacy environments still running RSA BSAFE SSL-J 3.x or the Cisco product named in the advisory references. Modern systems are unlikely to be affected unless old embedded Java SSL components remain in use. Treat as urgent only if legacy affected products are still deployed. The business risk is authentication bypass to sensitive data, but exposure is likely historical unless old Cisco or RSA SSL-J components remain operational. Mitigation focus: Identify any RSA BSAFE SSL-J 3.0, 3.0.1, or 3.1 deployments.; Check Cisco and RSA advisory guidance for fixed versions or vendor-supported upgrades.; Retire or isolate legacy Cisco iCND/iCDN 2.0 systems if still present..

Prepared

Jul 1, 2026, 07:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.